$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/fe2ea3cf-aec4-3d5c-8f5d-9c0478fb9d45.roa File: fe2ea3cf-aec4-3d5c-8f5d-9c0478fb9d45.roa (raw, json) Hash identifier: vfFVhNYjVV4d4+EMj26BiZ+qJuzAMeHtCoh/FjVq/xc= Subject key identifier: 6A:D6:72:79:77:0C:28:F5:3D:DD:D6:C2:47:4F:28:FE:D5:08:33:4A Certificate issuer: /CN=3b5275cd-7d56-4cf1-953a-92ba38e28375 Certificate serial: 010D0C9F4328584B03169BFCA9D446139416A880 Authority key identifier: 4E:4D:DD:B6:70:F7:B9:4A:AC:35:97:06:E9:2A:88:77:C8:91:67:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/fe2ea3cf-aec4-3d5c-8f5d-9c0478fb9d45.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 398218 IP address blocks: 206.166.200.0/24 maxlen: 24 2602:fd96:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/3b5275cd-7d56-4cf1-953a-92ba38e28375.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/3b5275cd-7d56-4cf1-953a-92ba38e28375.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:9b:fc:a9:d4:46:13:94:16:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b5275cd-7d56-4cf1-953a-92ba38e28375 Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=2b3d6ab5-9782-4bf1-8c60-8b7a6f8e5b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:72:39:fe:e0:bc:0b:56:93:a0:36:36:a7:04: d0:63:0d:7a:c5:71:07:99:49:b9:7c:d8:29:c4:c1: e7:12:18:f0:d9:c3:b1:dc:18:e5:eb:0b:34:3b:9d: 4c:a2:e3:db:7e:81:4b:42:b7:49:c2:a2:73:17:a3: ab:83:a4:c4:63:45:5a:da:d7:99:c6:92:83:da:74: e1:da:e3:08:e7:e6:9e:92:71:30:3b:8a:04:28:1b: 44:ad:61:5e:cc:6a:6b:1f:ba:44:d3:2b:30:aa:a9: c2:de:71:da:f5:ef:a9:d4:d4:8a:0c:09:63:83:d7: c6:72:6f:0b:0e:1f:c8:90:be:5f:20:97:a8:92:ff: 48:40:81:5a:75:4b:6c:18:57:29:5a:6d:41:b1:0e: 3d:9a:d4:68:29:7f:f8:75:a6:5d:7a:fd:73:00:77: b9:7f:d8:5f:0d:c1:73:54:6c:2c:99:bd:ad:9b:e6: f7:50:64:6d:43:2e:34:0d:33:76:70:ee:4a:cf:c4: bb:56:94:14:65:76:7c:56:92:9c:8c:7c:1e:a7:2d: dc:ae:1f:be:03:50:a5:10:d2:ae:0f:46:47:c5:89: c8:74:a8:e0:05:d8:7a:4e:e8:6b:c1:47:7a:5e:e3: 8e:ba:96:7e:9b:41:c4:89:b7:95:5a:1f:e7:2b:17: 66:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D6:72:79:77:0C:28:F5:3D:DD:D6:C2:47:4F:28:FE:D5:08:33:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/fe2ea3cf-aec4-3d5c-8f5d-9c0478fb9d45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/3b5275cd-7d56-4cf1-953a-92ba38e28375.crl X509v3 Authority Key Identifier: keyid:4E:4D:DD:B6:70:F7:B9:4A:AC:35:97:06:E9:2A:88:77:C8:91:67:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375.cer sbgp-ipAddrBlock: critical IPv4: 206.166.200.0/24 IPv6: 2602:fd96:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:92:c7:7e:86:87:57:85:9c:85:fd:0d:76:ed:e4:4c:e6:e3: d8:d2:c1:85:4e:b3:cc:ec:fd:57:bb:33:09:51:3a:63:4e:82: 1a:76:11:c9:12:6b:86:87:03:45:60:5e:17:b4:0f:dc:5a:9f: 3a:85:ff:98:65:8a:03:9b:53:dd:b4:cc:73:5c:70:a9:54:19: 3d:85:cf:6e:b0:c3:fa:fa:11:b6:ef:21:7d:f8:ba:c0:d9:e2: 5e:eb:1d:4b:03:a3:34:ad:dc:3e:80:22:aa:ae:94:91:b3:55: f0:3c:1f:cc:c8:e3:3a:5a:d7:57:47:84:59:28:63:a5:7a:b7: bf:cc:6f:50:0e:e1:45:1e:9e:f7:db:00:91:bc:b0:ce:9d:33: 63:9d:37:5b:88:c0:ee:16:48:15:81:7c:c5:06:e0:96:ca:43: a5:21:8d:60:c8:7f:f0:8b:fc:3a:78:71:96:85:13:ce:d2:08: bb:ac:ab:a2:4a:1c:ab:7b:a4:1a:e5:f9:ad:2a:55:17:f6:39: 59:95:d8:e2:2c:7f:a8:88:15:8c:0f:83:34:6f:99:21:89:5f: bf:c0:18:3e:9d:da:2a:d8:8f:fe:5e:04:d3:76:55:f2:12:d2: 8b:28:40:f4:a2:6f:cb:fd:c5:46:2a:08:c9:c8:d2:63:ee:5e: 07:b7:d1:94 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEsDFpv8qdRGE5QWqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I1Mjc1Y2QtN2Q1Ni00Y2YxLTk1M2EtOTJiYTM4ZTI4 Mzc1MB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk MmIzZDZhYjUtOTc4Mi00YmYxLThjNjAtOGI3YTZmOGU1YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHI5/uC8C1aToDY2pwTQYw16xXEHmUm5fNgp xMHnEhjw2cOx3Bjl6ws0O51MouPbfoFLQrdJwqJzF6Org6TEY0Va2teZxpKD2nTh 2uMI5+aeknEwO4oEKBtErWFezGprH7pE0yswqqnC3nHa9e+p1NSKDAljg9fGcm8L Dh/IkL5fIJeokv9IQIFadUtsGFcpWm1BsQ49mtRoKX/4daZdev1zAHe5f9hfDcFz VGwsmb2tm+b3UGRtQy40DTN2cO5Kz8S7VpQUZXZ8VpKcjHwepy3crh++A1ClENKu D0ZHxYnIdKjgBdh6TuhrwUd6XuOOupZ+m0HEibeVWh/nKxdmVQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGrWcnl3DCj1Pd3WwkdPKP7VCDNKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjUy NzVjZC03ZDU2LTRjZjEtOTUzYS05MmJhMzhlMjgzNzUvZmUyZWEzY2YtYWVjNC0z ZDVjLThmNWQtOWMwNDc4ZmI5ZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I1Mjc1Y2QtN2Q1Ni00Y2YxLTk1 M2EtOTJiYTM4ZTI4Mzc1LzNiNTI3NWNkLTdkNTYtNGNmMS05NTNhLTkyYmEzOGUy ODM3NS5jcmwwHwYDVR0jBBgwFoAUTk3dtnD3uUqsNZcG6SqId8iRZ4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjUyNzVjZC03ZDU2LTRjZjEtOTUzYS05MmJh MzhlMjgzNzUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzqbIMA8E AgACMAkDBwAmAv2WAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeZLHfoaHV4Wchf0Ndu3kTObj2NLBhU6z zOz9V7szCVE6Y06CGnYRyRJrhocDRWBeF7QP3FqfOoX/mGWKA5tT3bTMc1xwqVQZ PYXPbrDD+voRtu8hffi6wNniXusdSwOjNK3cPoAiqq6UkbNV8DwfzMjjOlrXV0eE WShjpXq3v8xvUA7hRR6e99sAkbywzp0zY503W4jA7hZIFYF8xQbglspDpSGNYMh/ 8Iv8OnhxloUTztIIu6yrokocq3ukGuX5rSpVF/Y5WZXY4ix/qIgVjA+DNG+ZIYlf v8AYPp3aKtiP/l4E03ZV8hLSiyhA9KJvy/3FRioIycjSY+5eB7fRlA== -----END CERTIFICATE-----Generated at Mon Oct 20 04:40:06 2025 by rpki-client